CVE-2026-79636 describes an improper validation of certificates with host mismatches in Dell Secure Connect Gateway 5.0 Appliance and Application. Versions prior to 5.36.00.16 (Appliance) and 5.36.00.00 (Application) are affected. This vulnerability allows an unauthenticated attacker with remote access to exploit the certificate validation weakness, potentially leading to unauthorized access. The CVSS 3.1 base score is 7.0, reflecting network attack vector, high attack complexity, no privileges required, no user interaction, unchanged scope, high confidentiality impact, low integrity impact, and low availability impact. No vendor advisory or patch information is currently available, and no known exploits in the wild have been reported.

An unauthenticated remote attacker could exploit the improper certificate validation to gain unauthorized access to the affected Dell Secure Connect Gateway 5.0 systems. This could lead to a high confidentiality impact, with potential exposure of sensitive information. Integrity and availability impacts are considered low.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, organizations should monitor Dell's advisories for updates and consider limiting remote access to affected systems where feasible.